Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/_9rnS2jiMBC-W0ctlHlTc8kJUfE.roa
File: _9rnS2jiMBC-W0ctlHlTc8kJUfE.roa (raw, json)
Hash identifier: llE3J54Fy2OrnvLHt8T9KfrD3Tx4L8z86Zhma+E5A3k=
Subject key identifier: FF:DA:E7:4B:68:E2:30:10:BE:5B:47:2D:94:79:53:73:C9:09:51:F1
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 01856DEF7AFCA5640E33242CAC083856C69D
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/_9rnS2jiMBC-W0ctlHlTc8kJUfE.roa
Signing time: Sun 01 Jan 2023 15:24:49 +0000
ROA not before: Sun 01 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39077
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7a:fc:a5:64:0e:33:24:2c:ac:08:38:56:c6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 1 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffdae74b68e23010be5b472d94795373c90951f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:38:dd:f4:08:24:c4:96:ef:b8:eb:f4:05:
7a:b0:e1:99:34:f0:df:88:0e:ae:a3:a2:d9:a0:29:
04:47:23:b1:66:c4:e3:cf:4e:03:c7:1b:19:9c:8f:
29:6c:ad:5b:92:c0:c5:09:9f:e6:d7:d1:01:cb:e9:
3f:ad:d0:6d:8d:08:9b:b6:ae:ea:27:34:22:d7:68:
51:c8:89:89:d5:00:3e:fc:c7:83:09:58:f4:d0:ce:
f1:41:7d:d6:d8:6d:81:ab:47:64:20:e4:77:61:66:
52:73:c2:84:8c:a5:89:a1:8b:77:4a:3b:18:e6:c4:
dd:fb:a7:7f:39:a5:56:e9:f7:13:a3:20:73:77:ab:
68:fd:e2:8e:b2:48:32:a2:40:8e:db:6a:75:3d:a4:
41:a4:d4:6f:21:1c:55:14:5c:aa:66:5a:fe:44:91:
1f:cb:9b:28:1e:94:98:cb:25:30:2b:56:5c:10:8c:
da:f1:ec:81:c6:c5:ba:79:e9:78:0b:7d:d5:1e:95:
20:fb:a4:2c:fb:40:c9:87:e2:eb:37:1a:84:84:ba:
27:2a:8c:12:44:c1:22:4c:88:a8:d4:c5:cf:97:de:
2c:66:47:b3:be:77:96:2e:d4:1e:38:7c:9e:db:8f:
80:64:92:c8:d4:bf:bd:99:05:19:38:c3:1b:6e:98:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DA:E7:4B:68:E2:30:10:BE:5B:47:2D:94:79:53:73:C9:09:51:F1
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/_9rnS2jiMBC-W0ctlHlTc8kJUfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4c:51:89:da:50:54:24:18:d8:ad:35:ba:a2:fb:41:63:a3:
f1:9a:e7:1e:60:67:4c:b6:08:07:6a:53:c5:54:a0:2a:57:86:
cc:23:e4:5c:6a:5b:f6:96:73:6f:ca:a2:fa:12:b4:d9:ff:bf:
ac:20:e9:7c:0d:f6:ee:05:54:83:da:2a:5a:49:60:83:93:1c:
9c:b6:cb:1a:43:34:4e:a6:dc:da:ab:43:33:df:60:ef:7b:07:
f6:3a:d5:97:39:58:0f:43:4c:77:9b:5f:ea:8d:86:0f:48:59:
86:2f:fd:80:c6:1c:d7:a1:a1:9e:11:6d:a6:b4:10:9f:57:ea:
04:a1:ad:f6:0c:84:e3:28:a9:57:d7:c8:8c:c6:e1:8c:24:ca:
cf:05:ec:8d:6a:0d:e6:05:f6:a5:53:7a:d4:a5:40:f6:d5:ac:
2a:44:cd:1f:8b:b1:e8:b2:4f:cc:0a:d7:c6:1c:24:9b:80:5f:
2e:ec:91:db:44:48:09:0b:f9:a4:b4:4a:d4:c9:f7:be:20:e5:
46:d7:6e:2d:dd:58:bc:40:cf:62:49:e4:dc:61:48:4f:fe:4b:
75:50:34:6e:1a:8e:f2:e5:c3:59:fd:3d:da:54:4c:21:7e:7d:
4e:62:eb:93:26:89:2c:22:4c:49:c8:ac:b3:f4:87:42:e6:ac:
5b:15:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:49 2024 by rpki-client on console-ams.rpki-client.org